au.net.ocean.maven.plugin:maven-plugin-tools (1.1), ch.hortis.sonar:sonar-maven-plugin (>=0.2, <=1.0.2) +402 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.1)

org.codehaus.plexus:plexus-utils MAVEN version 1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - au.net.ocean.maven.plugin:maven-plugin-tools 1.1 - ch.hortis.sonar:sonar-maven-plugin =0.2, =0.5....

org.apache.maven.plugins:maven-checkstyle-plugin (2.2) potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4.4)

org.codehaus.plexus:plexus-utils MAVEN version 1.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-checkstyle-plugin 2.2 Source cves: CVE-2025-67030 Source advisor...

org.apache.maven.plugins:maven-dependency-plugin (2.0-alpha-1), org.apache.maven.shared:maven-test-tools (1.0-alpha-1) +7 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.4-alpha-1)

org.codehaus.plexus:plexus-utils MAVEN version 1.4-alpha-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - org.apache.maven.plugins:maven-dependency-plugin 2.0-alpha-1 -...

de.jiac.micro.platforms.java6:microjiac-java6-platform (3.0), de.jiac.micro.tools:microjiac-midlet-maven-plugin (3.0) +223 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (1.2)

org.codehaus.plexus:plexus-utils MAVEN version 1.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.codehaus.plexus:plexus-utils and may be impacted: - de.jiac.micro.platforms.java6:microjiac-java6-platform 3.0 -...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

DEBIAN-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

AZL-81041 CVE-2025-67030 affecting package plexus-utils for versions less than 3.3.0-5

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

UBUNTU-CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

at.ganzleicht.vaadin:vaadin-maven-plugin (>=9.1.1, <=9.1.3.2), au.com.acegi:xml-format-maven-plugin (>=4.0.1, <=4.1.0) +2055 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=4.0.0, <=4.0.2)

org.codehaus.plexus:plexus-utils MAVEN version =4.0.0, =9.1.1, =4.0.1, =0.0.1, =0.0.9, =0.4.0, =0.0.0, =1.9.2, =1.0.0-m5, =1.0.0-m6, =1.0.0-m1, =0.0.3, =0.0.3, =0.0.3, =0.0.3, =1.0.0-m10 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

Plexus-Utils security vulnerabilities

Plexus-Utils is a general-purpose utility program developed by Plexus. This program is primarily used to simplify the handling of strings, files, command lines, and XML data. Versions of Plexus-Utils prior to 20c2f80 contained security vulnerabilities. These vulnerabilities stemmed from the extra...

Linux Distros Unpatched Vulnerability : CVE-2025-67030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus- utils before 6d780b3378829318ba5c2d29547e0012d5b29642...

PT-2026-28076

Name of the Vulnerable Software and Affected Versions plexus-utils versions prior to 6d780b3378829318ba5c2d29547e0012d5b29642 Description A directory traversal issue exists in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils. This allows an attacker to execute arbitrary...

aero.albers.osmbse:mdzip-process-sources-maven-plugin (0.0.1), aero.albers.osmbse:mdzip-validate-maven-plugin (0.0.1) +17837 more potentially affected by CVE-2025-67030 via org.codehaus.plexus:plexus-utils (>=3.0, <=3.6.0)

org.codehaus.plexus:plexus-utils MAVEN version =3.0, =1.9.0, =1.9.0, =1.9.0, =0.1, =0.1.0, =0.0.1, =0.0.6, =0.1.10, =0.1.3, =0.0.1, =0.0.1, =0.2.0, =0.2.11 and more Source cves: CVE-2025-67030 Source advisory: SNYK:JAVA-ORGCODEHAUSPLEXUS-15766699...

CVE-2025-67030: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

CVE-2025-67030

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642. This allows an attacker to execute arbitrary code...

Directory Traversal

Overview org.codehaus.plexus:plexus-utils is a collection of various utility classes to ease working with strings, files, command lines, XML and more. Affected versions of this package are vulnerable to Directory Traversal via the extractFile function. An attacker can exploit this to execute...

Plexus-utils security vulnerabilities

Plexus-utils is a general-purpose utility developed by Plexus Open Source. This program is primarily used to simplify the handling of strings, files, command lines, XML, etc. A security vulnerability existed in Plexus-utils 6d780b3378829318ba5c2d29547e0012d5b29642 and earlier versions. This...